library/std/src/net/parser.rs in Rust before 1.53.0 does not properly consider extraneous zero characters at the beginning of an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses, because of unexpected octal interpretation.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rust-toolset | May 4, 2022 | Aug 7, 2021 |
| Alpine Linux | — | Upgrade rust | Mar 26, 2024 | Aug 7, 2021 |
| Centos_linux | — | Upgrade cargoUpgrade rlsUpgrade rustUpgrade rust-std-static-wasm32-unknown-unknownUpgrade cargo-debuginfoUpgrade rust-debugger-commonUpgrade clippy-debuginfoUpgrade rust-gdbUpgrade rust-toolsetUpgrade clippyUpgrade rust-docUpgrade rust-std-staticUpgrade rustfmt-debuginfoUpgrade rust-srcUpgrade rls-debuginfoUpgrade rust-analysisUpgrade rust-debuginfoUpgrade rust-debugsourceUpgrade cargo-docUpgrade rustfmtUpgrade rust-lldb | Nov 10, 2021 | Aug 7, 2021 |
| Debian | — | Upgrade rustc | Jul 30, 2024 | Aug 7, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/rust-bin.Upgrade dev-lang/rust. | Oct 17, 2022 | Aug 7, 2021 |
| Oracle Solaris | — | Upgrade developer/rust/cargo to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4Upgrade developer/rust/rustc to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | Aug 7, 2021 |
| Oracle_linux | — | Upgrade cargoUpgrade cargo-docUpgrade rust-toolsetUpgrade rust-std-static-wasm32-unknown-unknownUpgrade rust-analysisUpgrade rust-srcUpgrade rust-gdbUpgrade rust-docUpgrade rustfmtUpgrade rust-lldbUpgrade rustUpgrade rust-std-staticUpgrade rust-debugger-commonUpgrade rlsUpgrade clippy | Nov 17, 2021 | Mar 29, 2021 |
| Redhat_linux | — | Upgrade rust-debuginfoUpgrade rustUpgrade rustfmtUpgrade rust-lldbUpgrade clippyUpgrade rust-std-staticUpgrade rust-debugsourceUpgrade cargo-docUpgrade rust-docUpgrade rustfmt-debuginfoUpgrade rust-debugger-commonUpgrade cargoUpgrade rust-analysisUpgrade cargo-debuginfoUpgrade rlsUpgrade rust-gdbUpgrade clippy-debuginfoUpgrade rls-debuginfoUpgrade rust-std-static-wasm32-unknown-unknownUpgrade rust-toolsetUpgrade rust-src | Nov 10, 2021 | Aug 7, 2021 |
| Rocky_linux | — | Upgrade clippyUpgrade rust-std-staticUpgrade rlsUpgrade rustUpgrade rust-docUpgrade rust-analysisUpgrade cargoUpgrade rustfmt-debuginfoUpgrade clippy-debuginfoUpgrade rust-debugsourceUpgrade rust-toolsetUpgrade rust-debuginfoUpgrade rustfmtUpgrade cargo-debuginfoUpgrade rls-debuginfoUpgrade rust-std-static-wasm32-unknown-unknown | Mar 12, 2024 | Aug 7, 2021 |
| Ubuntu | — | Upgrade rustc | Nov 19, 2024 | Aug 7, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 7, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub